
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F2A847EA16F111F1A3F2151E3B3D8C67.roa
File: F2A847EA16F111F1A3F2151E3B3D8C67.roa (raw, json)
Hash identifier: CYPRbcjvjOqLilt67w/rUtuXiqucjA+Xi7CRUTPOlrs=
Subject key identifier: DF:A1:6F:05:8A:94:6C:9C:12:CF:FA:38:4E:95:79:69:85:67:85:AC
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: F6F7
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F2A847EA16F111F1A3F2151E3B3D8C67.roa
Signing time: Mon 06 Jul 2026 17:46:31 +0000
ROA not before: Mon 06 Jul 2026 17:46:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 154232
IP address blocks: 123.253.182.0/23 maxlen: 24
2001:df6:1f40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Tue 28 Jul 2026 08:21:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 63223 (0xf6f7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2, serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: Jul 6 17:46:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6a4be9f7-e379
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:92:87:4d:36:1a:bb:56:8e:0c:1d:42:45:2d:
ec:1c:49:73:3d:93:a7:da:2e:ce:15:c5:25:d2:c3:
2d:4a:fd:2a:4c:e4:7c:ba:30:2c:9e:e1:05:f5:44:
0b:bd:1b:82:64:15:e3:45:af:aa:bc:8e:45:63:23:
4d:dd:16:a2:f6:25:5f:a9:12:ec:75:6b:ae:3e:bc:
83:76:d7:56:9e:11:b2:31:29:4f:ba:96:8b:42:0c:
af:12:d6:d7:7e:ad:1b:f0:82:f9:7b:86:8c:96:3f:
56:30:b5:b8:ae:f3:3f:0e:c6:ed:60:a4:62:6a:68:
b4:c1:d1:3b:ed:e1:9c:49:21:f1:24:66:56:ed:8a:
72:74:4c:1e:62:96:bc:44:40:1e:79:71:7a:00:e2:
01:7b:5d:16:06:3a:62:37:ba:85:74:d5:57:07:68:
15:8e:7e:91:f7:15:b2:d0:a7:3b:b4:b0:e6:ab:3c:
c9:85:2a:9b:3b:16:6a:5b:b4:1c:a3:fe:d0:da:dc:
5f:76:ac:15:fc:5d:ba:15:1b:d6:d8:5c:90:10:70:
42:8f:b9:3a:87:fb:5b:72:15:82:ef:3c:d6:00:78:
e4:42:ba:64:c6:ac:5a:dc:83:2c:ff:e4:27:5e:9f:
fd:92:65:57:32:fe:bf:1b:12:fa:c2:60:a7:05:8f:
58:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:A1:6F:05:8A:94:6C:9C:12:CF:FA:38:4E:95:79:69:85:67:85:AC
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/F2A847EA16F111F1A3F2151E3B3D8C67.roa
sbgp-ipAddrBlock: critical
IPv4:
123.253.182.0/23
IPv6:
2001:df6:1f40::/48
Signature Algorithm: sha256WithRSAEncryption
3a:1e:b7:be:ae:6a:01:29:fa:d7:9a:88:d1:51:6a:69:ab:71:
f7:ea:07:e4:a0:c7:86:88:86:ce:72:97:f3:c2:5a:84:14:2d:
15:60:40:16:70:ed:f7:c5:d0:ba:5c:51:50:8f:62:66:af:9e:
d6:6c:5f:bc:fb:59:99:92:97:ca:6b:9d:10:a8:26:65:7d:5a:
1a:75:6d:69:3d:8d:1b:78:5b:4b:04:78:63:9a:8e:f0:13:5b:
66:c8:3c:72:c8:bc:ee:1c:93:3f:a6:75:34:44:12:25:d1:24:
2e:f5:49:2f:df:ff:62:28:39:06:3a:7a:a6:d2:df:97:e8:b2:
7a:37:19:f8:1b:3d:58:f9:af:84:13:d0:bf:85:1a:3e:ee:a2:
26:af:9a:8a:f5:04:17:c8:e2:30:cf:f3:ef:80:3d:3d:0b:7e:
32:07:6a:13:99:a8:b2:54:f9:1d:c3:48:07:5c:42:81:3e:94:
ea:73:73:d9:5d:0e:4e:61:11:98:bb:63:b0:9b:32:15:39:b9:
4a:22:3b:56:60:01:0c:5d:6e:8a:17:9b:b3:38:00:c8:b3:6e:
c4:bf:25:43:52:83:bd:73:28:2a:95:7e:10:00:5e:12:03:89:
ca:7f:79:78:7b:ec:cb:26:5c:7c:19:3f:c9:14:2d:a1:9f:cd:
4b:79:6f:86
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIDAPb3MA0GCSqGSIb3DQEBCwUAMEYxETAPBgNVBAMTCEE5
MThFREIyMTEwLwYDVQQFEygyOTZFREI2NEYzQUY2RTlEOTgwOTMyRTgxNkY5NTk4
M0UzQUJDODIzMB4XDTI2MDcwNjE3NDYzMVoXDTI3MDcwMTAwMDAwMFowGDEWMBQG
A1UEAxMNNmE0YmU5ZjctZTM3OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC
ggEBAKWSh002GrtWjgwdQkUt7BxJcz2Tp9ouzhXFJdLDLUr9KkzkfLowLJ7hBfVE
C70bgmQV40WvqryORWMjTd0WovYlX6kS7HVrrj68g3bXVp4RsjEpT7qWi0IMrxLW
136tG/CC+XuGjJY/VjC1uK7zPw7G7WCkYmpotMHRO+3hnEkh8SRmVu2KcnRMHmKW
vERAHnlxegDiAXtdFgY6Yje6hXTVVwdoFY5+kfcVstCnO7Sw5qs8yYUqmzsWalu0
HKP+0NrcX3asFfxduhUb1thckBBwQo+5Oof7W3IVgu881gB45EK6ZMasWtyDLP/k
J16f/ZJlVzL+vxsS+sJgpwWPWIsCAwEAAaOCAnEwggJtMB0GA1UdDgQWBBTfoW8F
ipRsnBLP+jhOlXlphWeFrDAfBgNVHSMEGDAWgBQpbttk869unZgJMugW+VmD46vI
IzAOBgNVHQ8BAf8EBAMCB4AwgYMGA1UdHwR8MHoweKB2oHSGcnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkxOEVEQjIvMkE0M0UzMEM3
MEU5MTFFMkIzNkQ0QjZCMjk3OUJCMjAvS1c3YlpQT3ZicDJZQ1RMb0Z2bFpnLU9y
eUNNLmNybDB+BggrBgEFBQcBAQRyMHAwbgYIKwYBBQUHMAKGYnJzeW5jOi8vcnBr
aS5hcG5pYy5uZXQvcmVwb3NpdG9yeS9CNTI3RUY1ODFENjYxMUUyQkI0NjhGN0M3
MkZEMUZGMi9LVzdiWlBPdmJwMllDVExvRnZsWmctT3J5Q00uY2VyMEoGA1UdIAEB
/wRAMD4wPAYIKwYBBQUHDgIwMDAuBggrBgEFBQcCARYiaHR0cHM6Ly93d3cuYXBu
aWMubmV0L1JQS0kvQ1BTLnBkZjCBlgYIKwYBBQUHAQsEgYkwgYYwgYMGCCsGAQUF
BzALhndyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5
MThFREIyLzJBNDNFMzBDNzBFOTExRTJCMzZENEI2QjI5NzlCQjIwL0YyQTg0N0VB
MTZGMTExRjFBM0YyMTUxRTNCM0Q4QzY3LnJvYTAwBggrBgEFBQcBBwEB/wQhMB8w
DAQCAAEwBgMEAXv9tjAPBAIAAjAJAwcAIAEN9h9AMA0GCSqGSIb3DQEBCwUAA4IB
AQA6Hre+rmoBKfrXmojRUWppq3H36gfkoMeGiIbOcpfzwlqEFC0VYEAWcO33xdC6
XFFQj2Jmr57WbF+8+1mZkpfKa50QqCZlfVoadW1pPY0beFtLBHhjmo7wE1tmyDxy
yLzuHJM/pnU0RBIl0SQu9Ukv3/9iKDkGOnqm0t+X6LJ6Nxn4Gz1Y+a+EE9C/hRo+
7qImr5qK9QQXyOIwz/PvgD09C34yB2oTmaiyVPkdw0gHXEKBPpTqc3PZXQ5OYRGY
u2OwmzIVOblKIjtWYAEMXW6KF5uzOADIs27EvyVDUoO9cygqlX4QAF4SA4nKf3l4
e+zLJlx8GT/JFC2hn81LeW+G
-----END CERTIFICATE-----
Generated at Tue Jul 21 13:37:51 2026 by rpki-client